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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims 
in the application: 

Listing of Claims 

Claims 1 - 28 (canceled). 

29. (Presently Amended) A method for verifying a cast ballot B cas t stored in a server, the method 
comprising: 

forming a digital signature of B cast using a private key of the server DS(B cast , s); 
associating the B cast and DS(B cast , s) with a vote serial number VSN; 
forming a confirmation token, comprising DS(B cast , s) and VSN; 
making the confirmation token available to a user; 
receiving a confirmation token made available to a user; 

extracting VSN reC eived token and DS reC eived token(B ca st, s) from the received token; and 
for VSN equal to VSN reC eived token, comparing DS rece ived token(B ca st, s) and at least one of 

DS(B cas t, s) and DS(B cast , S); 
if the comparison shows equivalence between the data compared, determining that B cast is 

verified. 

30. (Presently Amended) The method of Claim 29 wherein: 

the confirmation token further comprises a digital signature of the an aggregation 
comprising the associated B cast and VSN using the server's private key 
DS(Aggregation, s), 
extracting DS reC eived token (Aggregation, s) from the received token; and 
B cast is verified only upon the additional condition that DS re ceived token (Aggregation, s) is 
equivalent to DS( Aggregation, s). 
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3 1 . (Presently Amended) A method for verifying a cast ballot recorded in a server, the method 
comprising: 

receiving in a server at least one set of: 
a cast ballot B cast and 

a digital signature of B cast formed with the private key of a voter casting the ballot 
DS(B cast , v); 

forming: 

a digital signature of B cast using a private key of the server DS(B cast , s), 
associating B cas t, DS(B cast , v), and DS(B cast , s) with a vote serial number VSN; 

forming a confirmation token, comprising: 

DS(B cas t, s), DS(B cast , v), VSN, and DS(Aggregation, s), 
where DS(Aggregation, s) is the digital signature of the aggregation of the 
associated B cast , DS(B cast , v), DS(B cast , s), and VSN; 

making the confirmation token available to a user; 

receiving a confirmation token 

extracting VSN reC eived token and at least One Of DSreceived token(B C asb S), DSreceived token(B cas t, v), 

and DSreceived token(AG, s) from the received token; and 
for VSNreceived token and the corresponding VSN, comparing at least one of: 

DSreceived token(B C ast> s) and DS(B cas t> S); 
DSreceived token(B C ast> v ) 5 and DS(B cast , v); 

DSreceived token(Aggregation, s), and DS(Aggregation, s); 
if comparison shows equivalence between the data compared, determining that B cast is 
verified. 
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32. (Previously Presented) The method of Claim 31 further comprising: 

if comparison shows equivalence between DS re ceived token(Aggregation, s), and 

DS(Aggregation, s), determining that the received confirmation token has not 
been modified since its formation. 

33. (Previously Presented) A method for verifying a cast ballot recorded in a server, the method 
comprising: 

receiving a cast ballot ("B cast ") in a server; 

forming a digital signature of B cas t using a private key of the server ("DS(B cas t , s)"), 
associating B cast and DS(B cast , s) with a vote serial number ("VSN"); 
for VSN, comparing DS(B cast , s) and DS(B cas t , S), 

if comparison shows equivalence between the data compared, determining that B cas t is 
verified. 
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